Regex Editor & Tester

Matches fail2ban log entries as they appear in AWS CloudWatch, extracting named capture groups for date (YYYY-MM-DD), time (HH:MM:SS), jail name (sshd, recidive, or mysqld-auth), action (e.g., Ban/Unban), and IP address. The leading comma-quote anchors parsing after the CloudWatch timestamp field, making it useful for structuring and filtering centralized ban events in CloudWatch Logs.